MAINE (WABI) – Federal officials confirmed they are auditing MaineCare to review oversight in areas considered high risk.
The Centers for Medicare and Medicaid Services said the audit will examine safeguards against fraud, waste and abuse—including how the state identifies risks, refers suspected fraud and handles improper payments.
States are responsible for maintaining Medicaid program-integrity controls and providing CMS with timely, accurate information.
CMS said it works with states to assess those controls and may coordinate with inspectors general and law enforcement when appropriate.
The agency said it can’t discuss details of the ongoing audit and has no additional updates.
Copyright 2026 WABI. All rights reserved.
IT & DATA SECURITY (MITIGATING THE “INSIDER THREAT”)
As seen in the TD Bank case, an employee with too much “access” can sell your customer data to syndicates.
- Principle of Least Privilege (PoLP): Employees should only have access to the specific folders and databases required for their current task.
- Access Revocation: Have a “Termination Checklist” that ensures all digital access (Email, VPN, Banking) is revoked within 60 minutes of an employee resigning or being dismissed.
- System Logs & Audit Trails: Enable “Read/Write Logging” on your server. If a customer’s data is leaked, you need to know exactly which login accessed that record and at what time.
- Encryption at Rest: Ensure that sensitive files (like your customer ID numbers or payroll spreadsheets) are encrypted so that if a staff member copies them to a USB, they cannot be read.